Automated Tools

Microsoft provides three automated tools for locking down Windows and IIS:

  • Microsoft Baseline Security Analyzer (MBSA). This tool detects a large number of common security issues, such as blank passwords and missing security patches. MBSA alerts you to the cause of the issue and recommends steps for fixing them. It’s available as a free download from http://www.microsoft.com/technet/security/tools/Tools/MBSAhome.asp. MBSA requires Windows 2000 or Windows XP, with Internet Explorer 5.01 or later. The tool is shown in Figure 11-1.

    The Microsoft Baseline Security Analyzer

    Figure 11-1. The Microsoft Baseline Security Analyzer

  • IIS Lockdown tool. This application, shown in Figure 11-2 ...

Get Security for Microsoft® Visual Basic® .NET now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial